801285 - detached signature files missing for current release (16.0.1)

Status: RESOLVED DUPLICATE of bug 799420

(Release Engineering :: General, defect)

Description

[G. Berger]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:15.0) Gecko/20100101 Firefox/15.0.1
Build ID: 20120905151427

Steps to reproduce:

want to gpg verify the auth. of the current thunderbird release (16.0.1) before installation


Actual results:

the detached signature file is missing at: ftp://releases.mozilla.org/pub/mozilla.org/thunderbird/releases/16.0.1/linux-i686/de/

This must be a general problem in the release mechanism for fast releases, because it is the same for firefox (https://bugzilla.mozilla.org/show_bug.cgi?id=800663) and it occurs from time to time.


Expected results:

there should be an asc armored detached signature file at ftp://releases.mozilla.org/pub/mozilla.org/thunderbird/releases/16.0.1/linux-i686/de/

Comment 1

[[e-mail] (:bhearsum)]

This is intentional. We stopped generating them because we have signed checksums of the files in SHA512SUMS{,.asc} (and the SHA1 and MD5 versions). You can verify the signature of one or more of those files, them compare the checksum of the file you downloaded to the one in the SUMS file.

https://bugzilla.mozilla.org/show_bug.cgi?id=799420#c3 has a more detailed explanation.